CVE-2025-24797

Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2.

CVSS v3 9.4 CRITICAL

9.4^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/meshtastic/firmware/security/advisories/GHSA-33hw-xhfh-944r	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:meshtastic:meshtastic_firmware:*:*:*:*:*:*:*:*

History

03 Oct 2025, 15:31

Type	Values Removed	Values Added
CPE		cpe:2.3:o:meshtastic:meshtastic_firmware::::::::
References	~~() https://github.com/meshtastic/firmware/security/advisories/GHSA-33hw-xhfh-944r -~~	() https://github.com/meshtastic/firmware/security/advisories/GHSA-33hw-xhfh-944r - Third Party Advisory
First Time		Meshtastic meshtastic Firmware Meshtastic

15 Apr 2025, 18:39

Type	Values Removed	Values Added
Summary		(es) Meshtastic es una solución de red en malla de código abierto. Un fallo en la gestión de paquetes de malla que contienen datos protobuf no válidos puede provocar un desbordamiento de búfer controlado por el atacante, lo que le permite secuestrar el flujo de ejecución y, potencialmente, provocar la ejecución remota de código. Este ataque no requiere autenticación ni interacción del usuario, siempre que el dispositivo objetivo retransmita los paquetes en el canal predeterminado. Esta vulnerabilidad se corrigió en la versión 2.6.2.

15 Apr 2025, 00:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-04-15 00:15

Updated : 2025-10-03 15:31

NVD link : CVE-2025-24797

Mitre link : CVE-2025-24797

CVE.ORG link : CVE-2025-24797

JSON object : View

Products Affected

meshtastic

meshtastic_firmware

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122

Heap-based Buffer Overflow

{"id": "CVE-2025-24797", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.4, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-04-15T00:15:14.353", "references": [{"url": "https://github.com/meshtastic/firmware/security/advisories/GHSA-33hw-xhfh-944r", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2."}, {"lang": "es", "value": "Meshtastic es una soluci\u00f3n de red en malla de c\u00f3digo abierto. Un fallo en la gesti\u00f3n de paquetes de malla que contienen datos protobuf no v\u00e1lidos puede provocar un desbordamiento de b\u00fafer controlado por el atacante, lo que le permite secuestrar el flujo de ejecuci\u00f3n y, potencialmente, provocar la ejecuci\u00f3n remota de c\u00f3digo. Este ataque no requiere autenticaci\u00f3n ni interacci\u00f3n del usuario, siempre que el dispositivo objetivo retransmita los paquetes en el canal predeterminado. Esta vulnerabilidad se corrigi\u00f3 en la versi\u00f3n 2.6.2."}], "lastModified": "2025-10-03T15:31:58.283", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:meshtastic:meshtastic_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07897E2C-E396-4CDF-A8F2-DD499A814562", "versionEndExcluding": "2.6.2"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}